metasystema.org
ObsoletedDRAFT STANDARDIETF stream

RFC 2617: HTTP Authentication: Basic and Digest Access Authentication

This RFC has been replaced. Do not implement against it for new work — it was formally obsoleted by RFC 7235, RFC 7615, RFC 7616, RFC 7617.

Current document in this lineage: RFC 7616 — HTTP Digest Access Authentication; RFC 7617 — The 'Basic' HTTP Authentication Scheme; RFC 9110 — HTTP Semantics; RFC 9111 — HTTP Caching; RFC 9112 — HTTP/1.1

In plain English — editorial summary, not part of the RFC

This document provides the specification for HTTP's authentication framework, the original Basic authentication scheme and a scheme based on cryptographic hashes, referred to as "Digest Access Authentication". [STANDARDS-TRACK]

Document record

Document ID
RFC2617
Published
June 1999
Authors
J. Franks; P. Hallam-Baker; J. Hostetler; S. Lawrence; P. Leach; A. Luotonen; L. Stewart
Status
DRAFT STANDARD
Stream
IETF
Area
app
Pages
34
Also known as
—
Obsoletes:
RFC 2069
Obsoleted by:
RFC 7235, RFC 7615, RFC 7616, RFC 7617

Topics

Standards lineage

This document is one revision in a chain of 21 RFCs, each formally replacing the one before it.

  1. RFC 2068 (1997)
  2. RFC 2069 (1997)
  3. RFC 2145 (1997)
  4. RFC 2616 (1999)
  5. RFC 2617 (1999)
  6. RFC 2818 (2000)
  7. RFC 7230 (2014)
  8. RFC 7231 (2014)
  9. RFC 7232 (2014)
  10. RFC 7233 (2014)
  11. RFC 7234 (2014)
  12. RFC 7235 (2014)
  13. RFC 7238 (2014)
  14. RFC 7538 (2015)
  15. RFC 7615 (2015)
  16. RFC 7616 (2015)
  17. RFC 7617 (2015)
  18. RFC 7694 (2015)
  19. RFC 9110 (2022)
  20. RFC 9111 (2022)
  21. RFC 9112 (2022) ✓

Read the full history of HTTP/1.1 →

Referenced by

4 later RFCs formally update or obsolete part of this document.

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

Also filed under

About this page

The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.

Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.

Data sources · Editorial policy · Report a correction · What is an RFC?

canonical URL: /rfc/2617-http-authentication-basic-and-digest-access-authentication